jason_simmons_chsw4icq06p6b's profile

14 Messages


274 Points

Thu, Jan 16, 2020 3:34 PM

Tunneling SSID's using a VSCG Controller

Moving from applianced based  3K Zone Directors ( which have been running flawlessly for about 100 years in production so far ) to Virtual Smartzones,

I have a question regarding runnng a VSCG within a Vmware Cluster. I would like some clarification on the ability to tunnel traffic using these new Virtual controllers.

Could someone clarify the roles and differerences of the VSCG and the Virtual SmartZone-Dataplane (vSZ-D). Does one depend on the other ( like the Cisco Nexus virtual switches for Vmware )?

From my understanding only the vSZ-D can performing the actual tunneling and not the VSCG. and are the AP licenses compatible.



Official Rep


1.1K Messages


15.8K Points

2 y ago

Hi Jason,

If you setup a vSZ on your Vmware, you get two options of vSZ type.

1- vSZ Essentials
2- vSZ High-scale

Upon choosing one of them, further you get below options.

If you choose, vSZ-E, it supports only single interface for Control/Management/Cluster.
If you choose, vSZ-H, it supports single or three interface (Dedicated interface for Control, management and cluster plan).

If you see, still there is no provision for Data interface in vSZ, hence if you really want to tunnel the data to a data interface, you have to also install vSZ-Dataplane and then connect it to your vSZ controller.

Now vSZ controller will take care of APs control/Management and controller's cluster operations/traffic. vSZ-Dataplane will take care of data tunnels traffic.

vSZ controller and vSZ-Dataplane will create a SSH session with each other for control and management. APs will create two tunnels, one with vSZ for AP control/management and other with with vSZ-Dataplane for WLAN data traffic.

Refer this simple topology to understand.

You have to purchase license for vSZ-Dataplane instance but no licenses required to tunnel the APs.

vSZ-D is offered with 1G throughput capacity and you can purchase additional 10G throughput capacity license, if required.

vSZ-D also supports DHCP and NAT features but for that you have to buy additional licenses.

For more information, please refer the data sheet.


Hope this will help.

Syamantak Omer

14 Messages


274 Points

2 y ago


Thanks for the excellent clarification. Thanks for taking the time.

I'm however a little disappointed that Ruckus have fractured the functionality of the controllers like this. The DHCP server on the zonedirector was not the mose comprehensive, but at least we had one, and tunneling out the box.

As your explaination will obvioulsy apply to the Phsyical Smatzone appliances as well as the virtual ones.

It does seem a little backwards step, and will miss the tradtional ZoneDirectors as they are aged out.

Thanks again

Important Announcement